This IP address has been reported a total of
232
times from
173 distinct
sources.
59.38.131.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jun 4 10:29:12 38 sshd[2264039]: Invalid user dev from 59.38.131.149 port 46428
Jun 4 10:29:42 38 ...
show moreJun 4 10:29:12 38 sshd[2264039]: Invalid user dev from 59.38.131.149 port 46428
Jun 4 10:29:42 38 sshd[2264043]: Invalid user frappe from 59.38.131.149 port 52078
Jun 4 10:30:16 38 sshd[2264060]: Invalid user junior from 59.38.131.149 port 57722
Jun 4 10:30:46 38 sshd[2264063]: Invalid user sambauser from 59.38.131.149 port 35144
Jun 4 10:32:56 38 sshd[2264085]: Invalid user clamav from 59.38.131.149 port 57714
...
show less
2026-06-04T02:27:02.148037+00:00 Dokploy sshd[3570929]: Invalid user infinity from 59.38.131.149 por ...
show more2026-06-04T02:27:02.148037+00:00 Dokploy sshd[3570929]: Invalid user infinity from 59.38.131.149 port 33792
2026-06-04T02:27:36.191314+00:00 Dokploy sshd[3570991]: Invalid user parth from 59.38.131.149 port 42846
2026-06-04T02:28:10.329578+00:00 Dokploy sshd[3571064]: Invalid user vmuser from 59.38.131.149 port 51568
2026-06-04T02:29:50.689775+00:00 Dokploy sshd[3571291]: Invalid user koha from 59.38.131.149 port 50588
2026-06-04T02:30:21.238224+00:00 Dokploy sshd[3571357]: Invalid user gituser from 59.38.131.149 port 58764
...
show less
2026-06-04T09:41:01.567697+08:00 *hostname* sshd-session[145450]: Invalid user admin from 59.38.131. ...
show more2026-06-04T09:41:01.567697+08:00 *hostname* sshd-session[145450]: Invalid user admin from 59.38.131.149 port 34508
2026-06-04T09:42:49.864765+08:00 *hostname* sshd-session[145500]: Connection from 59.38.131.149 port 54742 on 10.89.160.7 port 22 rdomain ""
2026-06-04T09:42:50.105514+08:00 *hostname* sshd-session[145500]: Invalid user jack from 59.38.131.149 port 54742
2026-06-04T09:44:31.977300+08:00 *hostname* sshd-session[145590]: Connection from 59.38.131.149 port 46716 on 10.89.160.7 port 22 rdomain ""
2026-06-04T09:44:32.220269+08:00 *hostname* sshd-session[145590]: Invalid user username from 59.38.131.149 port 46716
show less
2026-06-04T03:31:14.113860+02:00 router02.wira-gmbh.de sshd[3891584]: Invalid user u1 from 59.38.131 ...
show more2026-06-04T03:31:14.113860+02:00 router02.wira-gmbh.de sshd[3891584]: Invalid user u1 from 59.38.131.149 port 38460
2026-06-04T03:31:14.299763+02:00 router02.wira-gmbh.de sshd[3891584]: Disconnected from invalid user u1 59.38.131.149 port 38460 [preauth]
2026-06-04T03:39:38.693989+02:00 router02.wira-gmbh.de sshd[3893901]: Invalid user user10 from 59.38.131.149 port 53948
2026-06-04T03:39:38.901782+02:00 router02.wira-gmbh.de sshd[3893901]: Disconnected from invalid user user10 59.38.131.149 port 53948 [preauth]
2026-06-04T03:40:35.070799+02:00 router02.wira-gmbh.de sshd[3894390]: Connection closed by 59.38.131.149 port 35844 [preauth]
show less
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-06-03T23:50:00Z and 2026-06- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-06-03T23:50:00Z and 2026-06-04T00:22:32Z
show less
2026-06-04T00:00:04.296834+00:00 cdn-nl sshd[280160]: Invalid user ftpuser2 from 59.38.131.149 port ...
show more2026-06-04T00:00:04.296834+00:00 cdn-nl sshd[280160]: Invalid user ftpuser2 from 59.38.131.149 port 41558
2026-06-04T00:04:19.227438+00:00 cdn-nl sshd[280195]: Invalid user howard from 59.38.131.149 port 60964
2026-06-04T00:05:44.510306+00:00 cdn-nl sshd[280214]: Invalid user mcserver from 59.38.131.149 port 48610
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T01:51:03.227971 www.yerkanian.com sshd[818970]: pam_unix(sshd:auth): authentication failu ...
show more2026-06-04T01:51:03.227971 www.yerkanian.com sshd[818970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149
2026-06-04T01:51:05.339971 www.yerkanian.com sshd[818970]: Failed password for invalid user fran from 59.38.131.149 port 52322 ssh2
2026-06-04T01:55:21.700887 www.yerkanian.com sshd[818998]: Invalid user user from 59.38.131.149 port 43500
2026-06-04T01:55:21.706792 www.yerkanian.com sshd[818998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149
2026-06-04T01:55:23.904162 www.yerkanian.com sshd[818998]: Failed password for invalid user user from 59.38.131.149 port 43500 ssh2
2026-06-04T02:01:01.386415 www.yerkanian.com sshd[819041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149 user=root
2026-06-04T02:01:03.593624 www.yerkanian.com sshd[819041]: Failed password for root from 59.38.131.149 port 50552 ssh2
...
show less
2026-06-04T00:23:34.788699+02:00 gw9.nodesafety.com sshd-session[229599]: Invalid user jenkins from ...
show more2026-06-04T00:23:34.788699+02:00 gw9.nodesafety.com sshd-session[229599]: Invalid user jenkins from 59.38.131.149 port 49204
2026-06-04T00:23:35.046526+02:00 gw9.nodesafety.com sshd-session[229599]: Disconnected from invalid user jenkins 59.38.131.149 port 49204 [preauth]
2026-06-04T00:29:44.663107+02:00 gw9.nodesafety.com sshd-session[230560]: Invalid user spider from 59.38.131.149 port 47188
2026-06-04T00:29:44.977826+02:00 gw9.nodesafety.com sshd-session[230560]: Disconnected from invalid user spider 59.38.131.149 port 47188 [preauth]
2026-06-04T00:30:24.426072+02:00 gw9.nodesafety.com sshd-session[230675]: Disconnected from authenticating user root 59.38.131.149 port 58520 [preauth]
show less